What’s Vulnerable › Products

ChatGPTNextWeb NextChat vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your ChatGPTNextWeb NextChat version is affected

Latest ChatGPTNextWeb NextChat vulnerabilities

• CVE-2026-118132 — CVE-2026-118132
• CVE-2026-105238 — ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery (CVSS 7.3)
• CVE-2026-82639 — NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure (CVSS 7.5)
• CVE-2026-7644 — ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization (CVSS 7.3)
• CVE-2026-7643 — ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy (CVSS 4.3)
• CVE-2026-7178 — ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery (CVSS 7.3)
• CVE-2026-7177 — ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery (CVSS 7.3)
• CVE-2025-50735 — (CVSS 7.5)
• CVE-2023-49785 — NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting (CVSS 9.8)